Live › vulnerability › CVE-2026-110244
IBM Langflow OSS 1.0.0 through 1.12.4 does not keep file paths inside their intended directory. A logged-in attacker can use this to obtain sensitive information from the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Teams running self-hosted Langflow OSS 1.0.0 to 1.12.4 where more than one person, or any untrusted user, has a login. A signed-in user can read files the Langflow server process can read, such as secret keys and credentials. IBM does not name a specific feature or setting that is required. Single-user local installs and instances no untrusted person can log in to are lower risk, but should still upgrade.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| langflow | pypi | >= 1.0.0, <= 1.12.4 | 1.12.5 |
pip show langflow or langflow --version; any version from 1.0.0 to 1.12.4 is affected, 1.12.5 or later is fixedUpgrade Langflow OSS to 1.12.5 (pip install -U langflow>=1.12.5); back up the install and test flows first.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
This page as .md · .json · in your agent: get_signal("CVE-2026-110244")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.